xl-release-security.xml.erb

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd
    ">

     <bean id="ldapServer" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
         <constructor-arg value="<%= @ldap_server_url %>" />
         <property name="userDn" value="<%= @ldap_manager_dn %>" />
         <property name="password" value="<%= @ldap_manager_password %>" />
         <property name="baseEnvironmentProperties">
             <map>
                 <entry key="java.naming.referral">
                     <value>ignore</value>
                 </entry>
             </map>
         </property>
     </bean>

     <bean id="ldapProvider" class="com.xebialabs.xlrelease.security.authentication.LdapAuthenticationProvider">
         <constructor-arg>
             <bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
                 <constructor-arg ref="ldapServer" />
                 <property name="userSearch">
                     <bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
                         <constructor-arg index="0" value="<%= @ldap_user_search_base %>" />
                         <constructor-arg index="1" value="<%= @ldap_user_search_filter %>" />
                         <constructor-arg index="2" ref="ldapServer" />
                      </bean>
                 </property>
             </bean>
         </constructor-arg>
         <constructor-arg>
             <bean class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
                 <constructor-arg ref="ldapServer" />
                 <constructor-arg value="<%= @ldap_group_search_base %>" />
                  <property name="groupSearchFilter" value="<%= @ldap_group_search_filter %>" />
                 <property name="rolePrefix" value="" />
                 <property name="searchSubtree" value="true" />
                 <property name="convertToUpperCase" value="false" />
             </bean>
         </constructor-arg>
     </bean>

     <bean id="rememberMeAuthenticationProvider" class="com.xebialabs.deployit.security.authentication.RememberMeAuthenticationProvider"/>

     <security:authentication-manager alias="authenticationManager">
          <security:authentication-provider ref="rememberMeAuthenticationProvider" />
          <security:authentication-provider ref="ldapProvider" />
          <security:authentication-provider ref="xlAuthenticationProvider"/>
     </security:authentication-manager>

</beans>